
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft
File: dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft (raw, json)
Hash identifier: vKunTErfIXJ3jy9AVSO+pH2ZrABmfFWDQON1jCe2Yiw=
Subject key identifier: 87:80:3C:17:D0:3E:04:D4:B6:46:9C:62:E7:FD:E1:AC:A3:C0:E1:45
Authority key identifier: 74:22:78:9E:8E:D0:BF:C2:0C:34:D7:BF:68:F5:19:EE:65:EF:F4:BC
Certificate issuer: /CN=A915B0D2/serialNumber=7422789E8ED0BFC20C34D7BF68F519EE65EFF4BC
Certificate serial: 01C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft
Manifest number: 01BD
Signing time: Fri 27 Mar 2026 03:20:41 +0000
Manifest this update: Fri 27 Mar 2026 03:20:40 +0000
Manifest next update: Fri 03 Apr 2026 03:20:40 +0000
Files and hashes: 1: dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.crl (hash: DkMAe3mccC/U5AmGf0pAdB68q0rKvGbuxkv8EZjps+E=)
2: FA0FC12E869E11EE9FAC6784C4F9AE02.roa (hash: H+RrU+ZPqJuxRlrjQS4NUzBdPG3qKib/lM9dVIH4hoA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.crl
rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 03:20:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451 (0x1c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B0D2, serialNumber=7422789E8ED0BFC20C34D7BF68F519EE65EFF4BC
Validity
Not Before: Mar 27 03:20:40 2026 GMT
Not After : Apr 3 03:20:40 2026 GMT
Subject: CN=69c5f789-cf70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:91:b3:cf:8e:fb:5c:5f:ab:9f:83:2d:03:ec:
35:fa:28:f2:7e:d9:05:e0:8c:9f:1f:05:be:c9:60:
f1:d7:29:c2:dc:f8:06:82:38:21:8c:36:10:e3:f3:
2b:d7:17:68:4c:85:a4:68:70:a6:56:d2:04:a0:d2:
90:e4:00:81:9b:b2:39:3b:d2:d4:68:72:fc:64:a1:
ad:d5:5a:d4:c5:de:d7:53:65:f6:7d:03:41:fa:55:
25:01:ce:91:a3:0b:cd:b4:52:f0:a6:4c:5e:8b:5d:
5e:fb:4a:ee:f5:1e:a5:c0:2e:93:4c:b0:ff:96:d3:
aa:bc:9d:ad:42:3d:0e:fb:10:0c:0a:2a:96:ef:2d:
d6:d0:74:04:18:33:77:0a:73:f9:0f:27:d0:bb:16:
e8:c2:2b:64:61:ce:f4:8e:3f:22:5b:b3:d0:62:96:
92:3a:af:d6:85:c5:1a:ca:7e:01:60:6e:11:3b:6a:
a0:1c:4d:34:b1:7a:46:7e:3b:bd:a9:4e:ac:c1:21:
47:d6:a9:8b:72:c1:e6:07:44:ec:ee:0d:65:48:da:
ab:f5:78:1f:a0:db:41:48:50:81:c8:40:ed:c9:64:
54:39:e7:b7:a4:df:b8:98:9d:ff:8a:1b:9d:10:76:
4d:7c:d1:9a:24:83:eb:e4:16:b8:d1:70:aa:fa:04:
d1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:80:3C:17:D0:3E:04:D4:B6:46:9C:62:E7:FD:E1:AC:A3:C0:E1:45
X509v3 Authority Key Identifier:
keyid:74:22:78:9E:8E:D0:BF:C2:0C:34:D7:BF:68:F5:19:EE:65:EF:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:fe:ba:9a:62:1c:cc:d2:21:7a:f5:97:f8:ce:f7:d7:6a:f4:
f7:21:16:98:de:5a:22:93:23:b5:69:67:16:2b:73:87:76:3c:
12:f7:7a:35:c2:e6:8f:63:14:79:42:50:03:10:66:18:49:d7:
ce:19:f0:1c:e6:18:17:1d:4c:60:24:03:75:c7:ef:0b:a4:cc:
14:15:a7:2f:9c:61:e4:51:2d:11:5d:6c:fd:e7:2e:93:75:44:
a0:69:97:fa:99:8a:12:74:51:7e:f8:8d:d7:c5:e8:96:c1:ce:
32:83:e7:83:39:5f:1e:a1:3f:63:2b:6b:ba:61:e5:c8:d8:55:
e3:9c:c6:de:66:1b:b5:7f:9f:25:af:ad:4d:74:07:7b:ef:5e:
26:1a:a7:69:2e:59:16:8d:58:88:2c:91:8e:a8:99:05:97:95:
c0:1d:1c:70:99:6c:a5:18:f6:f4:47:67:61:49:96:26:71:f6:
67:8a:4e:09:53:01:48:af:12:bb:23:45:4b:46:a0:f2:b0:f3:
d3:15:64:67:5f:cf:e6:9f:0d:6e:5e:3d:50:f2:d7:02:03:de:
ee:a2:f2:78:30:a9:a6:c1:68:65:0b:b9:2e:a3:dd:56:cc:75:
04:05:f3:40:05:bf:28:aa:4c:88:01:34:92:90:e0:57:5f:11:
68:e6:d4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:04:24 2026 by rpki-client